Malware (Viruses, Adware, Spyware)

Sub-Section Links:

Malware Email Examples

Computer Security Links

DISCLAIMER: The answers to the following questions are my opinion based partially on research, but mostly on my experiences, knowledge and logic. They are not meant to be authoritative. Search/Google for "virus" or "viruses" and see the thousands of pages out there. Many of them are MUCH more authoritative.

It is necessary to know that I use the terms:

"malware" to mean any program that does any or all of the following:
- installs itself (I didn't ask it to be installed)
- causes damage to my data or computer
- causes slow-downs to my system or network connection
- causes my computer to be used as part of a network (using MY CPU and connection time) without my knowledge
- causes my computer to send emails and messages to others without my knowledge (especially those that contain themselves to "infect" others' computers)
- causes my information to be collected and sent to businesses without my knowledge
"programs" and "software" below, to describe a set of instructions, a full program, or a small part of a larger program, that tells the computer what to do.
"malware" to mean any type of software that installs or replicates itself, and causes harm or slow-downs to your computer.

It is also necessary to know that I believe that:

all types of "malware" can be included in "viruses" ("Virus" has come to mean any program that does almost any of the above, though technically it's not the correct term.)
not all "malware" is bad:
- some allow you run free programs as long as you allow the ads
- some things considered as "spyware" or "adware" are simply the lists that my own computer/browser keeps (history)
- "cookies" are not (all) bad. (Again, many keep information and "where I last was" on a given site. And "session cookies" keep track of some of the things I've done on the site while I am there, sometimes easing navigation.)
if I change my home page to be a portal that others see as "spyware", that's MY choice. If a program forces the change, that's NOT ok.

What are (computer) viruses?
What are the main types of viruses?
How are viruses triggered (set off)?
What else can cause problems?
How can I protect my computer?
Where can I get more information?

What are (computer) viruses?

Viruses are "malevolent programs," designed to exploit vulnerabilities in security built into computers, and especially programs. They are used to commit "cybercrimes" New Window, including stealing identities, or disrupting operations of the computer or server.

There are many types of viruses for which you have to watch. Most are written specifically for vulnerabilities that thousands of people (including the programmers) are looking for in Microsoft products and PC computers, the most prevalent software and computer out there.

While they may figure it out, most cannot be reproduced on more than one computer without human assistance of some type, even if it's "just" opening an email attachment.

The people who put these things out don't care one whit about your computer, browser, other software, or your own personal data (including pictures) and email lists. In fact, many try to capitalize on the latter two, no matter what computer or programs you use.

Personal Data and Time - On your computer, that's something to be destroyed and wasted (respectively) by forcing complete rebuilding of your computer. Personal data can also be stolen by grabbing files, and sending them to perpetrators, to filter out the "important" (to them) stuff to sell and make money with.
Email Lists - Well, spammers probably pay pretty good money to get email addresses that are KNOWN to be valid and working. And the viruses tend to send themselves to your family and friends, sometimes using YOUR name, luring THEM into running the program to install the virus or connection on THEIR computer, using THEIR email address lists... and so on, and so on...

And you MAC and Firefox people don't get cocky! When the smallest vulnerability is found in your favorite computer/browsers (and don't ever believe they aren't looking), it will be exploited, I'm sure!

Viruses of all types can be as innocuous as flashing "GOTCHA" or a porn picture or movie on your screen at a certain time on a certain day, and doing nothing else; to malevolently deleting your data or corrupting important programs (to you or your employer) on your computer or network. This is true of ALL viruses. Some are designed just to tell the world "Look what I can do!" and others are meant to cause problems, from minor to major.

What are the main types of viruses?

Virus - Programs that reproduce themselves in place of other (usually necessary) programs. While they may not do anything but that, the simple act of removing necessary programs and replacing them with themselves causes problems. The definition has extended to "reproduce themselves on a network" and "reproduce themselves by sending themselves to everyone in the computer users' address book". In general, they cannot simply "start" themselves... They require someone to run them, and the majority of the time, this is done by innocently clicking on an email attachment.
Logic Bombs (slang) - Software (see above) designed to "go off" or "explode" when certain conditions are met. This may happen quickly, or may not ever happen. These conditions can be based on anything: Date, Time, Timestamp (both Date and Time), your clicking on a menu item, etc. If the instructions are in a program you have downloaded, it can be set off at any time.
Trojan Horse - Programs that appear to be something you would want (handy office programs, games, communication software, pornography (for some), etc.), but actually contain viruses or worms. These programs may actually work, doing what they say they'll do, but may also be running another process or program in the background where you can't see it, and be deleting files, sending itself in emails, or other "nasty" things.
Worm - Programs also has come to mean programs that reproduce themselves on disks and computer memory, until the computer goes down. It also is used to describe programs that reproduce themselves through network connections. (aka Write Once, Read Many - as in describing the way data is stored on certain devices like CDs or DVDs)

Please let me know if you know of any others, or if my descriptions are "off the mark."

How are viruses triggered (set off)?

Viruses can be triggered in a number of ways, but most require human intervention. Here are a couple:

Open a mail attachment - Most viruses are "sent" this way. The email can be Spam, or can be from an infected friend. Remember that the friend may not even know they're infected! The text of the email may be anything. The Virus Examples Page contains some of the ones I've received.
If it's designed as a "Logic Bomb", the attachment you opened may appear to do nothing, or it may display a picture or move; then, it may do nothing for some time. At a certain time it will "explode". It could also add, say, a menu option to a menu in a program you may not use very much. Then, when you click it to see what it does...

Again, if you know of other ways, or if my descriptions are wrong, let me know.

What else can cause problems?

Sometimes, these programs do little more than install Adware New Window, and/or Spyware New Window. While this, in itself, may not "harm" your computer, it can cause problems.

And, no matter how careful you are, if you:

Spend a lot of time linked to the internet (or your computer is)
Download programs (shareware or freeware) from the internet
Click on "pop-up" advertisements
Share files (music, movie, pictures, etc.) and/or download files from the internet
Buy stuff online
Share your computer with other people (and remember, your KIDS are "other people")

your computer is "at risk."

Things for which to watch:

You are bombarded by pop-up advertisements whenever you connect to the internet
Your computer system is slowing down
Your PC freezes, crashes, or hangs often
You seem to get a lot of slow internet connections
You loose network connection for short periods
You Receiving lots of email spam lately?

If any of the above are occurring, you may be infected with adware and/or spyware.

How can I protect my computer?

The rules are:

If you do not know the sender ...
If you do not expect an attachment from someone (hard to do, now-a-days, since many emails from friends contain pictures, movies, music, PowerPoint slideshows, etc. ... Learn your extensions!) ...
If you are sent an executable program (.exe) ...
If the attachment has "double-extensions" on it (ie: filename.txt.pif - has two extensions - ".txt" and ".pif". The outer one is the one that's used.) ...

NOTE: They HAVE been known to space the second (2nd) extension far out to the right (off the page, in some cases), leaving the file looking "normal" and "relatively harmless". BE CAREFUL!
If you receive an email but the "TO:" name/email address is not yours ...
If you don't have a good email scanner or virus scanner that will check new files as they are opened...

DO NOT CLICK ON/OPEN THE ATTACHMENT!

If it's from a friend's email address, IM or call them. MAKE SURE they sent it! Otherwise, trash it!

For more on the ",pif" extension, see File Extension Details for .PIF.

Spend the money, get AND RUN a good virus scanning program. Some of the "big names" also describe Virus Myths (Hoax emails), and can be found at: OFPv2 - Main - Flim-Flam Links/Virus Myth section.

If you think you have a virus, run Trend Micro™'s HouseCall. NOTE: This downloads a small program to your computer. It requires JAVA, for which a link is provided.

Get and install good Firewall software. This, along with your virus, adware, spyware, and malware (in general) scanners, are designed to limit exposure of a computer or network to attack, by enforcing boundaries between the computer, the network, and internet.

All of your scanners should be run at the very least once-a-week. If you download programs, pictures, or email daily, make sure your virus scanner protects you from incoming viruses.

Check out the links at OFPv2's Computer Security Links page.